Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=kubic&groupid=3&version=Tumbleweed&build=20200717 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=Kubic&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: btrfsprogs (5.6.1 -> 5.7) busybox c-ares (1.15.0+20200117 -> 1.16.1) fuse-overlayfs (1.0.0 -> 1.1.0) gettext-runtime gpg2 (2.2.20 -> 2.2.21) haproxy (2.1.7+git0.8bebf80fb -> 2.2.0+git0.3a00c915f) helm (3.0.3 -> 3.2.4) installation-images-MicroOS (15.12 -> 15.13) iputils issue-generator (1.9 -> 1.10) kernel-firmware (20200610 -> 20200702) kubernetes (1.18.4 -> 1.18.6) kubernetes1.17 (1.17.7 -> 1.17.9) kubernetes1.18 (1.18.4 -> 1.18.6) libedit libgcrypt (1.8.5 -> 1.8.6) libslirp (4.3.0 -> 4.3.1) libzypp (17.23.8 -> 17.24.0) perl-Bootloader (0.928 -> 0.929) permissions (1550_20200526 -> 1550_20200710) python-M2Crypto (0.35.2 -> 0.36.0) python-blinker rsync (3.1.3 -> 3.2.2) salt snapper (0.8.10 -> 0.8.11) zstd === Details === ==== btrfsprogs ==== Version update (5.6.1 -> 5.7) Subpackages: btrfsprogs-udev-rules libbtrfs0 - Update to 5.7: * mkfs: * new option to enable features otherwise enabled at runtime, now implemented for quotas, 'mkfs.btrfs -R quota' * fix space accounting for small image, DUP and --rootdir * option -A removed * check: detect ranges with overlapping csum items * fi usage: report correct numbers when plain RAID56 profiles are used * convert: ensure the data chunks size never exceed device size * libbtrfsutil: update documentation regarding subvolume deletion * build: support libkcapi as implementation backend for cryptographic primitives * core: global options for verbosity (-v, -q), subcommands -v or -q are aliases and will continue to work but are considered deprecated, current command output is preserved to keep scripts working * other: * build warning fixes * btrfs-debugfs ported to python 3 ==== busybox ==== - Enable syslogd for containers - Enable testsuite and package it for later rerun (for QA, jsc#CAR-15) ==== c-ares ==== Version update (1.15.0+20200117 -> 1.16.1) - Version update to 1.16.1 Security: * Prevent possible use-after-free and double-free in ares_getaddrinfo() if ares_destroy() is called prior to ares_getaddrinfo() completing. Reported by Jann Horn at Google Project Zero. Changes: * Allow TXT records on CHAOS qclass. Used for retriving things like version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3] Bug fixes: * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1] * Silence false cast-align compiler warnings due to valid casts of struct sockaddr to struct sockaddr_in and struct sockaddr_in6. * MacOS should use libresolv for retrieving DNS servers, like iOS * CMake build system should populate the INCLUDE_DIRECTORIES property of installed targets [2] * Correct macros in use for the ares_getaddrinfo.3 man page - Changes in version 1.16.0 Changes: * Introduction of ares_getaddrinfo() API which provides similar output (including proper sorting as per RFC 6724) to the system native API, but utilizes different data structures in order to provide additional information such as TTLs and all aliases. Please reference the respective man pages for usage details. * Parse SOA records from ns_t_any response * CMake: Provide c-ares version in package export file * CMake: Add CPACK functionality for DEB and RPM * CMake: Generate PDB files during build * CMake: Support manpage installation Bug fixes: * Fix bad expectation in IPv6 localhost test. * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to prevent complaints about CPPFLAGS in CFLAGS. * Fix .onion handling * Command line usage was out of date for adig and ahost. * Typos in manpages * If ares_getenv is defined, it must return a value on all platforms * If /etc/resolv.conf has invalid lookup values, use the defaults. * Tests: Separate live tests from SetServers* tests as only live tests should require internet access. * ares_gethostbyname() should return ENODATA if no valid A or AAAA record is found, but a CNAME was found. * CMake: Rework library function checking to prevent unintended linking with system libraries that aren't needed. * Due to use of inet_addr() it was not possible to return 255.255.255.255 from ares_gethostbyname(). * CMake: Fix building of tests on Windows - Drop regression.patch which have been fixed upstream - Refresh disable-live-tests.patch - Remove static lib since its required when doing tests and we dont want it included in package - Run spec-cleaner ==== fuse-overlayfs ==== Version update (1.0.0 -> 1.1.0) - Update to v1.1.0 - use openat2(2) when available. - accept "ro" as mount option. - fix set mtime for a symlink. - fix some issues reported by static analysis. - fix potential infinite loop on a short read. - fix creating a directory if the destination already exists in the upper layer. ==== gettext-runtime ==== Subpackages: libtextstyle0 - Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629) ==== gpg2 ==== Version update (2.2.20 -> 2.2.21) - Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007] - Add gnupg-gpgme-t-encrypt-sym.patch - GnuPG 2.2.21: * gpg: Improve symmetric decryption speed by about 25% * gpg: Support decryption of AEAD encrypted data packets * gpg: Add option --no-include-key-block * gpg: Allow for extra padding in ECDH * gpg: Only a single pinentry is shown for symmetric encryption if the pinentry supports this * gpg: Print a note if no keys are given to --delete-key * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore shown * gpgsm: Certificates without a CRL distribution point are now considered valid without looking up a CRL. The new option - -enable-issuer-based-crl-check can be used to revert to the former behaviour * gpgsm: Support rsaPSS signature verification * gpgsm: Unless CRL checking is disabled lookup a missing issuer certificate using the certificate's authorityInfoAccess * gpgsm: Print the certificate's serial number also in decimal notation * gpgsm: Fix possible NULL-deref in messages of --gen-key * scd: Support the CardOS 5 based D-Trust Card 3.1 * dirmngr: Allow http URLs with "LOOKUP --url" * wkd: Take name of sendmail from configure. Fixes an OpenBSD specific bug ==== haproxy ==== Version update (2.1.7+git0.8bebf80fb -> 2.2.0+git0.3a00c915f) - Update to version 2.2.0+git0.3a00c915f: https://www.haproxy.com/blog/announcing-haproxy-2-2/ * [RELEASE] Released version 2.2.0 * MINOR: version: mention that it's an LTS release now * DOC: minor update to coding style file * DOC: update INSTALL with new compiler versions * CLEANUP: ssl: remove unrelevant comment in smp_fetch_ssl_x_keylog() * DOC: configuration: remove obsolete mentions of H2 being converted to HTTP/1.x * BUG/MINOR: connection: See new connection as available only on reuse always * BUG/MEDIUM: connection: Don't consider new private connections as available * BUG/MINOR: backend: Remove CO_FL_SESS_IDLE if a client remains on the last server * MINOR: mux-h1: Improve traces about the splicing - refreshed patches to apply cleanly again: haproxy-1.6.0-makefile_lib.patch haproxy-1.6.0-sec-options.patch - track series file in source rpm ==== helm ==== Version update (3.0.3 -> 3.2.4) - Update to version 3.2.4 (fixes security issue - https://github.com/helm/helm/security/advisories/GHSA-q8q8-93cv-v6h8 - https://github.com/helm/helm/security/advisories/GHSA-cjjc-xp8v-855w - https://github.com/helm/helm/security/advisories/GHSA-qq3j-xp49-j73f ) * Improve the extractor and add tests (#8317) * Add checking of length of resourceList before creating of deleting * docs: fix capitalization in a few help messages * polish to keep the same log style * Fix markdown table in helm command doc * Add unit test for pkg/chart/chart.go * Fixing docs from version to appVersion (#7975) * Helm upgrades with --reuse-values and nil user values -- with tests (#7959) * fix(pkg/plugin): copy plugins directly to the data directory (#7962) * fs_test: use os.Getuid() instead user.Current() to determine if a test is executed with root privileges. * fix(helm): allow a previously failed release to be upgraded (#7653) * Fixing per gofmt * Fix issue with unhandled error on Stat * chore(helm): Avoid confusion in command usage * Fix unit test * Fix repo cache setting * Fixing PAX Header handling (#8086) * fix: upgrade using --force shoud not run patch logic (#8000) * Set DisableCompression to true to disable unwanted httpclient transformation * fix: write index.yaml file atomically (#7954) * fix linting error with lookup function (#7969) * bump version to v3.2 * fix: removed inaccurate comment (#7937) * Migrate SQL storage driver to Helm 3 (#7635) * fix: Fixed a regression that was introduced with changed nil handling (#7938) * Fix nested null value overrides (#7743) * Updating sprig and semver to newer versions * add unit test for function FindPlugins * fix: rebuild chart after dependency update on install (#7897) * Make get script eaiser for helm versions to live side by side (helm3 etc) (#7752) * add softonic to adopters (#7918) * test: forward-port regression test from Helm 2 (#7927) * Add an improved user error message for removed k8s apis * fix(tests): fix broken unit tests in storage (#7928) * Add unit test for Secrets/ConfigMaps (#7765) * docs: Update inline docs on action/upgrade.go (#7834) * add unit test for metadata Validate * add unit test for ChartFullPath * add unit test for ChartPath * add unit test for IsRoot * updated help text for install --atomic, which was completely inaccurate (#7912) * feat(cmd/helm): Update Cobra to 1.0.0 release * fix(storage): preserve last deployed revision (#7806) * fixed capitalization in a few help messages. (#7898) * chore(comp): Remove unnecessary code * ref(*): kubernetes v1.18 (#7831) * Adding template docs to the version command * Implement support for multiple args for repo remove (#7791) * fix: fixed bug in Dependency.List() (#7852) * Adding notes on semver to create Chart.yaml * feat: allow image tag override * feat: add pod annotations * Avoid downloading same chart multiple times * fix(helm): Data race in kube/client Delete func. (#7820) * Improve --show-only flag (#7816) * Add unit test for pkg/chart/chart.go * remove unneeded values files from testchart * update test chart to helm3 format * fix: update unit test for go 1.14 error string change (#7835) * Add fromYamlArray and fromJsonArray template helpers (#7712) * Delete unneeded chart output * add testing for upgrade --install with subchart notes * pass subchart notes option to install client * Snapcraft installation instructions added * helm create command's templates more consistent * Improve error message to check in unit test * Add unit test for lint/values.go * Fix a bug in Delete() in storage/driver/cfgmaps.go (#7367) * Fix a bug in storage/driver/secrets.go Delete() (#7348) * fix(cli): Make upgrade check if cluster reachable * Correcting links for release notes * Add tests * Add more detail to error messages and support a non-force mode in metadata visitor * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml * Fixing issue where archives created on windows have broken paths * fix(install): correct append tls config. * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml * Add unit test * Fix stray modules * Port --devel flag from v2 to v3 * Use Create method if no resources need to be adopted * chore(go.mod): run `go mod tidy` * Make the charts cache safe in presence of several Helm instances * fix: add new static linter and fix issues it found (#7655) * Add --insecure-skip-tls-verify for repositories (#7254) * ref(environment): use string checking instead * Save Chart.lock to helm package tar * test(helm): fix client update error * fix(helm): polish goimport * add unit test for RecordsReplace * fix(helm): respect resource policy on ungrade Don't delete a resource on upgrade if it is annotated with helm.io/resource-policy=keep. This can cause data loss for users if the annotation is ignored(e.g. for a PVC) * add unit test for ConfigMapDelete * add unit test for SecretDelete * fix(ADOPTERS): alphabetize org list (#7645) * Add verification output to the verify command * Fixes verification output on pull command * fix(helm): stdin values for helm upgrade --install * Update README.md * Add test for unknown subcommand * Return "unknown command" error for unknown subcommands * Fix golangci-lint errors. * Fix dep build to be compatiable with Helm 2 when requirements use repo alias * fix(cmd/helm): upgrade go-shellwords * Printing name of chart that do not have requested import value. * pkg/storage/records: add unit test for Exists * pkg/storage/records: add unit test for Index * pkg/storage/records: add unit test for Get * fix(helm): add --skipCRDs flag to 'helm upgrade' When 'helm upgrade --install' is run, this will allow to skip installing CRDs Closes #7452 * feat(tests): Allow to provision memory driver * feat(comp): Dynamic completion for plugins * feat(comp): Static completion for plugins * Alternative: annotation-only solution * Adopt resources into release with correct instance and managed-by labels * feat(comp): Move kube-context completion to Go * feat(install): introduce --create-namespace * Fix output of list action when it is failed * Pass the apiserver address/port via cli, introduce HELM_KUBEAPISERVER envvar * add license headers to release-notes.sh script * Adds script to help craft release notes * pkg/helmpath: fix unit test for Windows * fix golint failure in pkg/action * cmd/helm/search_repo: print info to stderr * pkg/gates: add unit test for String * Fix render error not being propogated * IsReachable() needs to give detailed error message. * fix(scripts): scrape for the latest v2/v3 release from the releases page * feat(upgrade): introduce --disable-openapi-validation: This is a copy of the --disable-openapi-validation flag from the install command as introduced by Matthew Fisher. See commit 67e57a5fbb7b210e534157b8f67c15ffc3445453 * ref(go.mod): k8s api 0.17.3 * Making fetch-dist get the sha256sum files * Pass kube user token via cli, introduce HELM_KUBETOKEN envvar * Place rendering invalid YAML under --debug flag * fix(kube): generate k8s native scheme only once * fix(kube): use non global Scheme to convert * Revert "Do not delete templated CRDs" * fix(helm): improved logs * Fix shasums to be usable by shasum and sha256sum applications * fix(comp): Fix broken completion for --output flag * add test for template recursion * fix recursion count in templates * Fix 'helm template' to also print invalid yaml * fixed missing bullet * Add ADOPTERS file, per CNCF requirements (#7507) * bump version to v3.1 * fix(version): fix typo in doc comment * fix(helm): Reworded logs for clarity * chore(*): Removes support for searching the plugin dir * chore(postrender): Adds unit tests for exec post renderer * Adds post-render support * fix(memory_test): rebase master * fix(cmd): Specify namespace for template command * fix(tests): Add namespace support to memory driver * Fixes issue where non-CRDs are read in from the crd directory * ref(kind_sorter): use an in-place sort for sortManifestsByKind, reduce code duplication * Fix engine.newFiles doc comment * Fixes issue where <CHARTNAME> is left in starter values file * fix(tests): Ignores tarball that will change on dep update * fix(helm): Don't wait for service to be ready when external IP are set * fix(chart): lock digest differs when dependency build with Helm 2 and then Helm 3 (#7261) * Create a single shasums.txt * Create a single shasums.txt * ref(go.mod): oras v0.8.1 (#6862) * feat(template): Allow template output to use release name (#7503) * fix(tests): Make tests pass on MacOS * fixed dependencies processing in case of helm install or upgrade for disabled/enabled sub charts * fix(test) use newly created index instead of ignoring it * Fix tests on arm64 and ppc64le (#7500) * style(cmd/lint): removed slash in subcharts fp * fix(lookup_func): do not return error when object is not found * Fix typo * Tidy up go dependencies (#7494) * fix(template): helm template "--show-only" flag producing duplicates when flag used more than once (#7204) * Fix some spelling errors in comment (#7492) * When no resources were created, do not try to clean them up * fix(comp): Allow zsh completion to handle -n flag * Adding security file * maintain backwards compatibility in the api for the CRDs function * fix(package): remove --set, --values, etc. flags * fix(chartutil): remove empty lines and a space from rendered chart templates (#7455) * Friendly error message for non-existent Chart while packaging (#7127) * fix(helm): sort hooks by kind for equal weight * fix test-style * allow limited recursion in templates * Render the CRDs to spec files * fix(test): Remove invalid subcommand in test * fix(kube) only add to scheme.Scheme once * Use /usr/bin/env for bash * Remove references to protobuf (#7425) * Allow tests to run on s390x (#7096) * fix(comp): Update based on review comments * Add unit test for Reverse() in pkg/releaseutil.go * fix: catch one additional discovery client warning (#7176) * feat(version): show "unreleased" when built from a branch * fix(helm): improve handling of corrupted storage * unnecessary import removed * Signed-off-by: Ahmad Kazemi log.Printf replaced to fix the log issue. * feat(comp): Isolate go completion framework better * feat(comp): Use cached charts file for speed * feat(test): add some completion tests * feat(comp): Don't use error codes for completion * feat(comp): Support completion for --revision flag * feat(comp): Support --generate-name in completion * feat(comp): Dynamic completion of flags in Go * feat(comp): Dynamic completion of arguments in Go * go.mod,go.sum: bump to k8s v1.17.1 * ref(pkg/storage): Refactor Deployed and DeployedAll (#7374) * Fix: helm3 - kind sorter incorrectly compares unknown and namespace * Fix typo in comment for func IsReachable * fix(test): Make resetEnv() properly reset settings * Refactored alpine-pod.yaml file to make the example work in accordance to the Values.yaml file * feat(comp): Speed up completion of charts * feat(chore): Remove unused code * Add hpa boilerplate * go.mod,go.sum: bump Kubernetes dependencies 1.17.0 * stop with an error immediately if a file or directory with that name already exists (#7187) * add option to bypass kubeconfig namespace * [helm create] Include serviceAccount.annotations value (#7246) * Add corresponding unit test to the function in parser.go * fix(helm): move ServiceAccount before Secret in InstallOrder. * chore(go.sum): run `go mod tidy` * fix error output * fix(tests): use sigs.k8s.io/yaml * Fix a typo "update" -> "updates" (#7346) * Add unit test for List() of pkg/storage/driver/memory.go * fix(cmd): Fixes logging on action conf init error (#6909) * Remove duplicated words (#7336) * Improve description for `--all` flag (#7144) * Add corresponding unit test to the function in resolver.go * Fix typo in --values cmd flag * Do not delete templated CRDs * Fix a typo "the the" -> "the" * fix(comp): tail cannot open +2 for reading * fix(tests): Use relative path to acceptance tests * Add corresponding unit test to the function in resource.go. * feat(cmd/lint): added a flag for linting subcharts * test(cmd/lint): added test for --with-subcharts flag * docs: point users to helm hub * fixup! Updated make to create two files sha256/sha256sum Please link sha256sum as checksum file in GIT releases page for future release * Updated make to create two files sha256/sha256sum Please link sha256sum as checksum file in GIT releases page for future release * fix(helm): add .orig as typical backup file * feat(checksum): update to get/get-helm-3 to match shasum fix * feat(checksum): Generate shasum/sha256sum -c compatible sha256 file * Port PR #4161 Fix incorrect timestamp when helm package to Helmv3 * Add back fix for CRD patch creation * Add new Makefile targets * Spelling (#7258) * add technosophos public key (#7256) * fix(kube): Port use of watcher with retries to wait for resources (#7217) * fixed golint * additional fixes based on @thomastaylor312 comment * addressing some feedback from @thomastaylor312 * fixed test issue * added rest client passed with action configuration * added license header * fixed circle ci issues * added check on namespaced resource * first lookup template function implementation * doc(helmpath) move licensing info out of godoc * fix(install) crd install with apiextensions.k8s.io/v1 * feat(template): process manifests in file path order, then in order found in each file (before sorting manifests) * fix(helm): Validate number of arguments in install client * Add missing statuses to the status help text (#7035) * Updating to sprig 3.0.2 to bring in a bugfix * fix(cmd): Add message about deprecated chart (#6889) * ref(pkg/action): split test of filterList (#6875) * fix(*): Helm v3 handling of APIVersion v1 charts dependencies (#7009) * add Marc Khouzam as a core maintainer * feat(install): introduce --disable-openapi-validation * chore(testdata): remove stale output * fix(tests): Repair tests failures * fix(helm): add --description flag to helm (#7074) * Repair failing unit tests - failure caused by os.Stat return values for directory size on Linux. * Reintroduce --is-upgrade to template command * fix: clarified behavior of 'list --deleted' (#6950) * improved the error message for failed package signing (#6948) * fix this inconsistency in the docs (#7157) * Fix godoc badge * Restoring fetch-dist and sign Make targets * fix(install): use ca file for install (#7140) * use sigs.k8s.io/yaml instead of gopkg.in/yaml.v2 * Fixing the code of conduct pointer * fix "Chart.lock is out of sync with Chart.yaml" (#7119) * Add a flag to allow template to output CRDs * fix(tests): mapfile is not available on MacOS * fix(cli): IsReachable check for "get values" * fix stack overflow error (#7114) * test(pkg): add unit tests for tar file edge cases * docs(install): clarify the --replace flag (#7089) * fix: ignore pax header files in chart validation * fix(plugin): Avoid crash on missing flag * chart_downloader: fix lint issue. * chart_downloader: avoid overriding TLS options from command flags when not setup in repo config. * cli/pull: pass TLS config to chart downloader from flags. (#7055) * chart_downloader: add TLS client config to options from repo config. (#7055) * chart_downloader: add test to verify that http opts are used correctly. (#7055) * fix(plugin): Avoid duplication of flag list * fix(plugin): Add missing -n known flag * fix(lint): Remove requirement that directory name and chart name match * remove unused variable * fix(lint): Remove requirement that directory name and chart name match * Signed-off-by: Jonathan Meyers * Signed-off-by: Jonathan Meyers * homebrew renamed formula to just helm from kubernetes-helm * Add s390x build target * fix: change error message to contain correct field name * fix(get-helm-3): remove tiller checks, fixup version check * fix(get): hard code DESIRED_VERSION when unset * fix(wait): Adds support for waiting on v1 apiextensions for CRDs * fix(get): install Helm v2.16.1 * fix(reame): update links to docs * fix(install): log the error when recording the release * fix(pkg/downloader): resolve repo alias before checking digests on build * fix(pkg/downloader): add failing test for build with repo alias * fix(strvals): port #3912, #4142, #4682, and #5151 to Helm 3 * fix(ci): pin golangci-lint to v1.21.0 * Used timeout instead of deadline * fix(cli): helm list was ignoring some errors * ref(tlsutil): remove ServerConfig * fix(tlsutil): accept only a CA certificate for validation * fix: stop discovery errors from halting chart rendering. (#6908) * print gvk information on existing resource conflict * fix(cli): Sort output of helm env * fix(show): restore comments from raw values * Correct spelling mistakes * fix(cmd): Standardizes all output to use lower snake_case names * Consider namespace when comparing resources * fix(version): implement `helm version -c`, mark as hidden * fix(getter): set up TLS options during .Get() * fix(chart): add JSON tags to chart object * fix(comp): Protect against user's aliases * fix(cmd): Updates description for template validation flag * Updating the usage language for search repo * feat(v3): Add shorthand for --all-namespace flag in list command (#6848) * fix(action): strip file extensions from name * Revert "[Makefile] Support reproducible builds" * Add namespace option to example kubectl command * fix(kube): return error when object cannot be patched * feat(helm): add linting support for '.tar.gz' tarballs for helm charts (#6829) * [Makefile] Support reproducible builds * fix(comp): helm plugin 'remove' is now 'uninstall' * fix(version): lift "unreleased" status * Porting fix from commit f5986db184cf6d16dcd48760ac749a20236fb845 * Fix import * fix rename for helm dependency upgrade ==== installation-images-MicroOS ==== Version update (15.12 -> 15.13) - merge gh#openSUSE/installation-images#388 - Adjust style to fix shellcheck warnings; admit this needs bash - Remove bashisms, explicitly use /bin/dash as interpreter (bsc#1172139) - 'make check' will run shellcheck on the scripts needing dash - Save 1.5 MiB RAM by switching inst_setup to dash - 15.13 ==== iputils ==== - remove unneeded libidn build dependency (boo#1174049) ==== issue-generator ==== Version update (1.9 -> 1.10) - Update to version 1.10 - Display wlan interfaces [bsc#1169070] ==== kernel-firmware ==== Version update (20200610 -> 20200702) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20200702 (git commit 74ac3b5a7e79): * amdgpu: add UVD firmware for SI asics * QCA: Update WCN3991 FW files * amdgpu: update renoir firmware from 20.20 release * amdgpu: update picasso firmware from 20.20 release * amdgpu: update raven2 firmware from 20.20 release * amdgpu: update raven firmware from 20.20 release * amdgpu: add vega20 TA firmware from 20.20 release * amdgpu: update vega20 firmware from 20.20 release * amdgpu: update vega12 firmware from 20.20 release * amdgpu: update vega10 firmware from 20.20 release * amdgpu: update navi10 firmware from 20.20 release * amdgpu: update navi14 firmware from 20.20 release * rtl_nic: add firmware for RTL8125B ==== kubernetes ==== Version update (1.18.4 -> 1.18.6) Subpackages: kubernetes-client kubernetes-kubeadm kubernetes-kubelet - Bump to kubernetes 1.18.6 and 1.17.9 ==== kubernetes1.17 ==== Version update (1.17.7 -> 1.17.9) - Update to version 1.17.9: * Don't return proxied redirects to the client * Include pod /etc/hosts in ephemeral storage calculation for eviction * cluster: ipvs conntrack module vs kernel version * kube-proxy ipvs masquerade hairpin traffic * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler * Wait for all informers to sync in /readyz. * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules. * hyperkube: Use debian-hyperkube-base@v1.1.1 image * test: add unit test * fix: use force detach for azure disk * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.8 * add docu + fix copyright year * export scheduler.Snapshot function, needed for cluster autoscaler integration * fix#92167: GetLabelsForVolume panic issue for azure disk PV * Fix DS expectations on recreate * kubeadm: don't re-add an etcd member if it already exists for "join" * kubelet, kube-proxy: unmark packets before masquerading them * Automated cherry pick of #90373: kube-scheduler: compatibility with ServerSideApply * some tests for new function * go-to-protobuf: fix rewrite of embedded struct fields * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node - add update-alternative logic for kubernetes1.17-client - Update to version 1.17.8: * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.8-rc.1 * hyperkube: Use debian-hyperkube-base@v1.1.0 image * Update CHANGELOG/CHANGELOG-1.17.md for v1.17.7 * kubeadm join: Wait longer for TLS bootstrapping * Fix merge errors * CSI: Modify VolumeAttachment check to use Informer/Cache * Fix log timestamps to be displayed in fixed width * If firstTimestamp is not set use eventTime when printing event * If lastTimestamp is not set use firstTimestamp when printing event ==== kubernetes1.18 ==== Version update (1.18.4 -> 1.18.6) Subpackages: kubernetes1.18-client kubernetes1.18-kubeadm kubernetes1.18-kubelet kubernetes1.18-kubelet-common - Update to version 1.18.6: * Don't return proxied redirects to the client * Include pod /etc/hosts in ephemeral storage calculation for eviction * Fix throttling issues when Azure VM computer name prefix is different from VMSS name * kube-proxy ipvs masquerade hairpin traffic * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler * Wait for all informers to sync in /readyz. * Fix bug in reflector not recovering from "Too large resource version" errors * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules. * hyperkube: Use debian-hyperkube-base@v1.1.1 image * debian-hyperkube-base/Dockerfile: Add iproute2 package * debian-hyperkube-base/Dockerfile: Cleanup spacing * debian-hyperkube-base/Dockerfile: Alpha-sort packages * test: add unit test * fix: use force detach for azure disk * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5 * Add tests covering startup probe without readiness * Pods which have not "started" can not be "ready" * add docu + fix copyright year * fix: don't use docker config cache if it's empty * fix#92167: GetLabelsForVolume panic issue for azure disk PV * Fix DS expectations on recreate * kubelet, kube-proxy: unmark packets before masquerading them * kubeadm: don't re-add an etcd member if it already exists for "join" * some tests for new function * go-to-protobuf: fix rewrite of embedded struct fields * Windows tests: Makes gMSA test more nanoserver friendly * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node - Update to version 1.18.5: * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1 * hyperkube: Use debian-hyperkube-base@v1.1.0 image * hyperkube: Build debian-hyperkube-base v1.1.0 image * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4 * kubeadm join: Wait longer for TLS bootstrapping * CSI: Modify VolumeAttachment check to use Informer/Cache * Fix log timestamps to be displayed in fixed width - move newest kubernetes-client to update-alternatives with kuberlr ==== libedit ==== - Regenerate the build system before the build in order to avoid errors due to automake version mismatch ==== libgcrypt ==== Version update (1.8.5 -> 1.8.6) - Update to 1.8.6 * mpi: Consider +0 and -0 the same in mpi_cmp * mpi: Fix flags in mpi_copy for opaque MPI * mpi: Fix the return value of mpi_invm_generic * mpi: DSA,ECDSA: Fix use of mpi_invm - Call mpi_invm before _gcry_dsa_modify_k - Call mpi_invm before _gcry_ecc_ecdsa_sign * mpi: Constant time mpi_inv with some conditions - mpi/mpi-inv.c (mpih_add_n_cond, mpih_sub_n_cond, mpih_swap_cond) - New: mpih_abs_cond, mpi_invm_odd - Rename from _gcry_mpi_invm: mpi_invm_generic - Use mpi_invm_odd for usual odd cases: _gcry_mpi_invm * mpi: Abort on division by zero also in _gcry_mpi_tdiv_qr * Fix wrong code execution in Poly1305 ARM/NEON implementation - Set r14 to -1 at function entry: (_gcry_poly1305_armv7_neon_init_ext) * Set vZZ.16b register to zero before use in armv8 gcm implementation * random: Fix include of config.h * Fix declaration of internal function _gcry_mpi_get_ui: Don't use ulong * ecc: Fix wrong handling of shorten PK bytes - Zeros are already recovered: (_gcry_ecc_mont_decodepoint) - Update libgcrypt-ecc-ecdsa-no-blinding.patch ==== libslirp ==== Version update (4.3.0 -> 4.3.1) - Update to 4.3.1 (bsc#1172380) - A silent truncation could occur in `slirp_fmt()`, which will now print a critical message. See also #22. - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to data leakage. See !44 and !42. - Fix win32 builds by using the SLIRP_PACKED definition. - Various coverity scan errors fixed. !41 - Fix new GCC warnings. !43 - Packaging changes - Enable "set_version" source service in _service file - Move "tar" and "recompress" service to "buildtime" as outlined in the OBS user guide - Enable "package-meta" as the libslirp build process now requires access to the git metadata. ==== libzypp ==== Version update (17.23.8 -> 17.24.0) - Completey rework the purge-kernels algorithm (fix bsc#1173106) The new code is closer to the original perl script, grouping the packages by name before applying the keep spec. - Set ZYPP_RPM_DEBUG=1 to capture verbose rpm command output (implements #228) - version 17.24.0 (22) ==== perl-Bootloader ==== Version update (0.928 -> 0.929) - merge gh#openSUSE/perl-bootloader#128 - Do not warn about missing SECURE_BOOT sysconfig - 0.929 ==== permissions ==== Version update (1550_20200526 -> 1550_20200710) Subpackages: chkstat permissions-config - Update to version 20200710: * Revert "etc/permissions: remove entries for bind-chrootenv". This currently conflicts with the way the CheckSUIDPermissions rpmlint-check is implemented. - Removed dbus-libexec.patch: contained in upstream - Update to version 20200624: * rework permissions.local text (boo#1173221) * dbus-1: adjust to new libexec dir location (bsc#1171164) * permission profiles: reinstate kdesud for kde5 * etc/permissions: remove entries for bind-chrootenv * etc/permissions: remove traceroute entry * VirtualBox: remove outdated entry which is only a symlink any more * /bin/su: remove path refering to symlink * etc/permissions: remove legacy RPM directory entries * /etc/permissions: remove outdated sudo directories * singularity: remove outdated setuid-binary entries * chromium: remove now unneeded chrome_sandbox entry (bsc#1163588) * dbus-1: remove deprecated alternative paths * PolicyKit: remove outdated entries last used in SLE-11 * pcp: remove no longer needed / conflicting entries * gnats: remove entries for package removed from Factory * kdelibs4: remove entries for package removed from Factory * v4l-base: remove entries for package removed from Factory * mailman: remove entries for package deleted from Factory * gnome-pty-helper: remove dead entry no longer part of the vte package * gnokii: remove entries for package no longer in Factory * xawtv (v4l-conf): correct group ownership in easy profile * systemd-journal: remove unnecessary profile entries * thttp: make makeweb entry usable in the secure profile (bsc#1171580) ==== python-M2Crypto ==== Version update (0.35.2 -> 0.36.0) Update to 0.36.0: - wrap SocketIO in io.Buffered* for makefile <lethliel> - SSL.Connection.close accepts an argument to force the socket closing <Christophe Haen> - SSL.Connection: make the clientPostConnectionCheck an instance attribute <Christophe Haen> - Fixed bug with usage of unexisting method getreply at SSL_Transport <roman-nagaev> - Add appveyor builds for python 3.7 and 3.8 <Daniel A. Wozniak> - Fixed syntax warning on line 44. <randomfox> - Update M2Crypto.six to 1.13.0 - base64.decodestring() was finally removed in Python 3.8. - wrap SocketIO in io.Buffered* for makefile <lethliel> - NULL is legal argument for key and iv paramters of EVP_CipherInit(3) - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and X509_STORE_SET_FLAGS function <Christophe Haen> - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 - Extend test cert validity to 2049 <Bernhard M. Wiedemann> - Revert using typing module in 2.6. It is just not worthy. - Update Debian/stable SSL as well - Make tests pass again. - Stop using string module, which has been deprecated. - Tiny fixes to make pyls more happy - CI: Rework Fedora CI configuration <Neal Gompa> - Remove upstream merged patch 001-fix-buffering-for-python38.patch. ==== python-blinker ==== - use pytest instead of deprecated nose - added patches https://github.com/jek/blinker/pull/60 + python-blinker-remove-nose.patch ==== rsync ==== Version update (3.1.3 -> 3.2.2) - Updated to version 3.2.2 * Too many changes to list, see included NEWS.md file. - Add BR on pkgconfig(openssl), rsync now uses openssl for MD4/MD5 - Add BR on libzstd-devel and liblz4-devel to enabled lz4 and zstd compression support. - Add BR on xxhash-devel to enable xxhash checksum support. - Refresh rsync-add_back_use_slp_directive.patch - Drop rsync-both-compressions.patch, rsync-send_error_to_sender.patch, rsync-avoid-uploading-after-error.patch, rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch: Fixed upstream. ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration - Fix the registration of libvirt pool and nodedev events - Accept nested namespaces in spacewalk.api runner function. (bsc#1172211) - info_installed works without status attr now (bsc#1171461) - Added: * info_installed-works-without-status-attr-now.patch * opensuse-3000.3-spacewalk-runner-parse-command-250.patch * opensuse-3000-libvirt-engine-fixes-251.patch ==== snapper ==== Version update (0.8.10 -> 0.8.11) Subpackages: libsnapper5 - added error handing for failed ambit detection (bsc#1174038) - version 0.8.11 ==== zstd ==== - Remove not needed exports in %install section. - Use %make_build macro. - Add upstream patch fix-lib-build.patch which fixes lib-mt target. -- To unsubscribe, e-mail: opensuse-kubic+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kubic+owner@opensuse.org